
$ rpki-client -vvf rpki.apnic.net/member_repository/A9135020/BE1EE504947011EC91B46C4DC4F9AE02/tjIT2OZi9FS-rux_PELjr2-JX7I.mft
File: tjIT2OZi9FS-rux_PELjr2-JX7I.mft (raw, json)
Hash identifier: E+Cdp6TW7jrJ/iCq4q84VvtI+TwmedlzpfCgsfL+XhM=
Subject key identifier: 8F:F5:ED:DA:1A:39:E2:FF:14:E6:03:1A:0F:FB:87:A8:E3:4F:FC:1F
Authority key identifier: B6:32:13:D8:E6:62:F4:54:BE:AE:EC:7F:3C:42:E3:AF:6F:89:5F:B2
Certificate issuer: /CN=A9135020/serialNumber=B63213D8E662F454BEAEEC7F3C42E3AF6F895FB2
Certificate serial: 04A5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tjIT2OZi9FS-rux_PELjr2-JX7I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9135020/BE1EE504947011EC91B46C4DC4F9AE02/tjIT2OZi9FS-rux_PELjr2-JX7I.mft
Manifest number: 048B
Signing time: Thu 23 Jul 2026 00:52:15 +0000
Manifest this update: Thu 23 Jul 2026 00:52:15 +0000
Manifest next update: Thu 30 Jul 2026 00:52:15 +0000
Files and hashes: 1: tjIT2OZi9FS-rux_PELjr2-JX7I.crl (hash: LIXzzaGWdskBTNZsu7abaCywdGlV/Uidoc//hTecb1M=)
2: 4A7E1926947511EC9795DF56C4F9AE02.roa (hash: YLvOpo/gAJOyi4aEbUEuHHlI1c0Z1SZvTOBlRFCy2+E=)
3: E61E258895F611EC88E42C7EC4F9AE02.roa (hash: 9Fd943GuQnIJTghRawSBwpY1MlmUVR4OO3uXynSyRN8=)
4: E6B9A5DA95F611EC88E42C7EC4F9AE02.roa (hash: 06opqbAigPxpeoeKrY3XTLUmvBCL1e7zcB701WZYE7c=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9135020/BE1EE504947011EC91B46C4DC4F9AE02/tjIT2OZi9FS-rux_PELjr2-JX7I.crl
rsync://rpki.apnic.net/member_repository/A9135020/BE1EE504947011EC91B46C4DC4F9AE02/tjIT2OZi9FS-rux_PELjr2-JX7I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tjIT2OZi9FS-rux_PELjr2-JX7I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 00:52:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1189 (0x4a5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9135020, serialNumber=B63213D8E662F454BEAEEC7F3C42E3AF6F895FB2
Validity
Not Before: Jul 23 00:52:15 2026 GMT
Not After : Jul 30 00:52:15 2026 GMT
Subject: CN=6a6165bf-4e69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:55:04:0c:7f:c9:1d:d0:73:75:e0:1f:03:2a:
8c:f0:32:04:44:9b:4e:a2:be:45:7f:7b:5a:dd:a9:
c5:fe:b8:fa:9b:b9:16:e8:c5:20:b7:2f:39:32:dd:
1d:5b:8c:6e:0d:64:64:7f:1c:aa:df:a6:7f:11:a1:
d9:5c:08:71:dd:80:c5:dd:7b:15:9e:08:2b:94:c6:
bd:3d:40:ee:e7:7a:12:16:a2:3d:e7:61:4f:40:28:
b9:4f:dd:97:c9:6c:07:4c:6a:7f:41:d1:36:46:0a:
db:6e:95:d7:70:ff:88:a0:d6:a5:79:91:dd:64:85:
67:67:b4:b0:6e:c9:70:29:4a:4e:27:e9:27:03:e7:
e7:f9:c0:cc:9f:d0:00:57:d9:88:92:ef:66:9d:5b:
ee:19:0c:5a:70:37:88:87:3c:b4:9b:d6:c1:28:dc:
aa:da:46:1a:18:2b:a5:a9:81:df:9d:e7:cd:f0:77:
9a:e1:c6:36:b0:4f:54:87:44:64:f2:10:ac:20:c7:
06:6d:5a:31:2c:3a:7c:81:0d:22:dd:54:92:79:62:
7e:e7:c8:cb:86:53:7a:29:ff:c9:94:b6:1c:bb:25:
31:2c:71:d9:64:02:3e:42:be:19:3d:35:b2:f5:3a:
45:12:7c:31:bd:2f:7c:a3:08:18:21:8f:15:84:d9:
cf:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:F5:ED:DA:1A:39:E2:FF:14:E6:03:1A:0F:FB:87:A8:E3:4F:FC:1F
X509v3 Authority Key Identifier:
keyid:B6:32:13:D8:E6:62:F4:54:BE:AE:EC:7F:3C:42:E3:AF:6F:89:5F:B2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9135020/BE1EE504947011EC91B46C4DC4F9AE02/tjIT2OZi9FS-rux_PELjr2-JX7I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tjIT2OZi9FS-rux_PELjr2-JX7I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135020/BE1EE504947011EC91B46C4DC4F9AE02/tjIT2OZi9FS-rux_PELjr2-JX7I.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2c:ec:b9:b7:22:76:10:1c:dc:3c:6b:cb:ef:c0:8c:9b:e9:95:
14:85:e6:84:4d:f5:af:60:b4:cb:f5:d2:ec:4f:b3:39:ac:4c:
7c:d9:3f:27:98:b2:ca:19:39:ae:cb:4f:d7:de:2a:a5:af:2c:
bf:2e:c6:36:9e:09:ca:68:7d:4c:57:5c:f2:64:b1:b1:08:42:
76:22:40:e0:49:fb:e0:5d:43:98:d7:69:2f:4b:ad:c7:2e:dc:
22:20:fa:15:8b:51:25:b0:6d:e7:cb:8b:06:69:b4:59:c3:21:
9f:03:64:53:d4:61:40:e7:58:51:29:e9:c1:7e:bc:7e:ae:1b:
21:0e:4a:c2:e3:4d:af:6d:19:7a:31:05:08:7f:96:ae:ea:e0:
4a:9f:90:d0:b9:f9:27:5f:f0:40:b6:1f:c7:69:1b:86:2f:dd:
40:d8:08:0f:a5:4b:4b:65:11:4e:4e:24:a9:fd:c9:89:b6:e6:
a5:fa:58:e1:2d:85:9f:66:01:c2:47:b3:83:4b:79:f0:dd:76:
56:c4:6d:fd:ba:8e:6e:ad:7e:98:82:1c:a5:1a:46:1b:1b:59:
9a:d7:9a:ff:2d:3e:d9:25:c1:1b:89:30:17:b2:b3:f7:89:05:
a0:70:9b:ae:ba:72:8b:0b:01:1e:07:83:ae:77:f9:89:bf:69:
48:b1:0c:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:11:10 2026 by rpki-client